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Abstract of JP200225261 1 
PROBLEM TO BE SOLVED: To provide a 
cryptographic communication system with 
higher information security. 
SOLUTION: A transmitter provides a plaintext 
with a one-way function to generate a first 
function value and first additional information, 
applies a reversible operation to the plaintext 
and the first additional information to generate 
joint information, and applies cryptographic 
algorithm to the joint information to generate a 
cryptogram. A receiver generates a second 
additional information similar to the first one, 
applies decoding algorithm to the cryptogram 
to generate decoded joint information, applies 
a reverse operation of the reversible operation 
to the decoded joint information and the 
second additional information to generate a 
decoded sentence, provides the decoded 
sentence with the one-way function to 
generate a second function value, compares 
the first function value with the second one, 
and determines the decoded sentence to be 
correct if these two function values agree with 
each other. 
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Set. 

vnemiddiMMunft 2 tttoiiti&fcimE stag 

[H*£ 2 ] STrEtg 1 ±J*^«ao:«rE« 2 ^fiJt^S 
ft*D««fzB»r;uzfUXA£»LT. RHHbtt*0«ffi 

csi^«6] newmii. ite«& u^e 

U 

H9£a^prafr^s:^©(*. mEig#*s^ffiia*^HijEm2 
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V 

(2) $5§S 2002-25261 1 (P2O02-252 6 1 1 A) 
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K#lg 1 fCffittroB&^afS^X^A. 
Si*^ 1 |-EK«0B&#aiSvX^A o 

«<t-r£*g#3Ei fcEKoBt^aiSv^TAc 
20 irmmivc, mwoe 9 h«t*tiLr, 
frEOTttrnmsii. srE«2ftJnm«fc^-5ix-c % 

1 1 ] wERraajwi&tt. gtisam i nmm 

30 IfTEJg plJfi^ff^Stt. BfTEm 2 ttinra*grz3*iE u . m 
E^fe^r— ^/UtH— (DiEil^— ^^fc^ANCftEfg 

urtey. ffirE3ttfe^-^;ufcs^t>x. fJE&^HSB- 
2] ifjExneagati. a Fx^n»<bLTB& 

«^fl£UTaHtL. ISJEftfg^iBI*. |TIEP&^3C£ 
■»HbLrBWXS*rtLTaHSL. RdESeSStt. 

BflEP&^^Stt. WEe*1IHRlcB»#7 r il,=ryXAtJt 

50 H5ES2±ia^®tt. tn&n3ttinmmtm-<Dm4tt 
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liJEffi^#©(*. flrENKIXfc* 1MB»#7JU=fUXA 

* - 1 £mt&'r*n*4! i icEttfcBWMi/xx 

A, 

mBSiMML££JftU 

a#t6*flmi::, *&E-*raiMS£teLT«iEm2H 

&fiI£±J£U fifIIBmiK»iltllE«2ia»fli:3&<- 

IS (D Bf^3& fe *> X t- A o 

tf}E2HSgffil*. fjK^tcft^T. ±tit£titzmi£.%\ 
fttt€£jftU WE*iBttlS*1inEK2H*tt£:A<- 

str**s*i£ | mrT * - <t £**m<t-r*tt#* i ke 

:*<tffiEmil§i»fiI<t£»§L. «TEB»X£1»LT 
2Mtm 1IQE«2HttiI£1ira%ilMri^fi<- 
t4M81i>bi)«Jti4»fiil'>xfAT'll!^b 

««a * rtmwxt- ^ ^°<t . 

MX^ 

b5eb&#x ^a«r & -V . 
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fi!Ei& 1 tt*D«fR£ H-CD* 2 «in««^±«-r 4« 2 
m&flMMMm&tf « 2 W»««ftf5EBr«35H©iS* 

ro »c-*fiiisfeiaa*ttuTieiH»ii«». »ieb»x 

<tBJlEmii§»il<i:^i2l«^-^x2l<SSS. &tfntJEB*-s§- 
X£tfrE»lH*tti:£»BU IWEWX^OTLt 

2ii»i5£Sk nm2Hftii^iii&%i nttffi^^- 
fjE^xttBiiE^xt-^-r^^^jKr 

OTB^UBX^v^tt. ffiEi£«MRT*mi\t>*u niJES 
20 «Xf^7U BflESfS^ST'ffl^^K. 

3S*x-t 

mIE0&^:*: * ttS x t- y ^ <t 

30 HiJEBfr^:* ££©-f ^Mxtt/?^, 

mam i tt*o«« * pi-<di£ 2 more ^12 

^7;urPJ Xi*£J6LT1»l6*1ttB£±l£-r*«x 

tfjEaHMS^resa&tf m 2 f^*Dtt«icBtiEorffi>i5s:(7)^ 

[01**1 7] ^X£B»<tLTHHM:£». lftE¥ 
timEmiK»flSi:^j3l«*r^i3fe«»S. Sl^bJIEBI^ 

wFEMxicffirE-^fiittiiia^teuxm 

2Hfttt€*k «5E«2lHafili:«ilEmiKSSfiSi:A<- 

ar twE««i*TWE2pxic-a-r*t«K 

^7A^E»LT^i>=i>tfi--^H^ttiy RTte^E» 
50 mJE&{lX7^l*. l!iIEi£«£ST*ffl^<b*k BiJE& 
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fi^f*^tt, flrEMaa-eiai^Ju 

^■ffi 4ft * Pi £ % 

miffing*: £i£fiT * 3t » & 

Xfc-^ftttHtt^JBLT* 1 Haa£f9 % SIE*^:* 

^asa 1 esan* $&a-r*&«aa*v<baEae:* 
£wean«»«!££ft<Bu UEa^x^a-^L-ca 

-r^ig^c. aEa*xi*aE*:*fc-»-r**«KT 
-aEa^a^itMa&tfm 2 tt*na«iztaE^a*;»*(D^ 

to O O 1 ] 
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[0002] 

&{SW§£2B C <h U < -r— * fc(S t£fr ? BS^affi* 
a*n£<m*&ft*J:3lcfcoT*T*3y, ff*a«* 

10 ©a#a*iBt^r±ja£LfcB3Es»xr=:a^7;nfux 

ra*MUj tE2L, W&V&±\lttmXktf$>Z> 
[ o o o 4 ] JiE«-^85 y L&2>m^tt0)-w 

i*. p»a£m*-c* aa£/<7> 

CCO^^tt. lftf/<7>- * t UT«l^Mftt4 

[O0 0 5] NTRUW«|;^t^(i, Jeff 

rey Hoff stein. Jill Pipher, andJoseph H. Silverma 
n, "NTRU: A ring based public key crypt osystenf ,L 
ecture Notes in Computer Science, 1423, pp. 267-28 
8,Springer-Verlas, 1998. tz& L < &^<Z>tLX L>£ 0 N" 

30 X t *fc * PTtett3&<& ««0T?,-tBL Wcfi 

toooe] (*fc*«i) JtB<DBa««*t4-fcft 
lc. KlTICfxtA ^ft N T R UBlf ^^ffltN-Sffifl 
«->XTAAt»a$*iTtA* 0 «TElWM*>x-rA 
t*. a*a«&tfa*aa*£«l*£*LTl^ 0 Bf#£ 

i - r 2 * • ■ • . r ^ ^ <t UTffit> 

40 ^m^^tL. niOPK^c x c 2 

■ • c ^s^rt-r*. 

[O O O 7] 

c x =E (m. Kp, r a ) 
c 2 =E (m. Kp, r 2 ) 

c „ =E (nru Kp, r n ) 

c = e (m. k. r> it. m^mKzmi^x. 
ffi-^x c s c <t £:*-r 0 

50 [0008] ;^rz. Bf^fta» % £]£UfcBM-Xc 
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. c 2 . • • • % c „ sml* cassis 

* * ** c ^ffi-^-ts fifXm' a v m ' 
2 " * " » rn „ ^H4o 
[O 0 0 9] 

m* a = : D(c 1 , Ks) 
m ' 2 =D(c 2 s Ks) 

m ' n =D ( c „ , Ks) 

m i * m * 2 % " " ■ * m" n 6* — OT*tE1j: 
o T t *fc-5t8£ y Ltz t frU? o 

[ooio] zoim^&feis^^^zt. a^say 
T*£*t<D(D. a{Htfi<ttiu i^^Wt- 
^te^sisi*/^;*-^ LTfflt>x. is) 

c a = E (rru Kp, r x ) 
c 2 = E (m s Kp» r 2 ) 

c n = E (rru Kp, r n ) 

<7)n©(Dll^xC^^^m^a^r [1] , r [2] , 

• ■ •, r [n] izmtzinmtfm=&t~MHZ>&titf 

Itiple Transmission Attack^es^o 
[ooi 1] AtttfJfcl*, «^E*y <D*±L*f|*B&-^;* 

U tfctiJ £*r ? 1 2r±tta<<£T "T * - <t *5*D tbT l . 
Z©Wai:ot>tli; Jeffrey Hoffstein, Jill Piph 
er, and Joseph H. Si Iverman, "NTRU: A ring based p 
ublic key crypt osystenf , Lecture Notes in Computer 
Science, 1423,pp.267-288,Spr inger-Ver lag, 1998. tz 

i*. ««y£*ttiL affifiA^**L. 

L A> t &±&tfi&T-r £ g*i t fc & £ t> ? M J&tffc 
(tt*«2.) £fc* ^2000-2 1 6 7 7 3^i>^ 
ffi36<iE L I > 4> -5 Ax§A\ £*i]3£-t * C t *<T' ^ £ Bt 

[O013] «*<D*fifl9T'f*. .BrJ£<D/^>iffi£l* 
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tf»\*y v3.fit^S:ai Ufc/x^v j. fil±fiScT;uzf ij XA<t 
H C7 JU=f U XAIz£ y HiJSBtfi^A^m 2 (D/x v yi 

« *<ie ^ r* & * t ^JBr-T * „ 

[O O 1 4) 

jsi>^®<gvxirA. ^issgis. m^mfe 

[OOI 5] 

m&fii£*ik Bii8Bm2ii»ii<tin8ami n?»fiict36<-^ 
30 ciwx*i&cr6as«^Fist^^ m 

[0016] ::t\ lwiB*i^«¥»&vlWEm2± 
40 Ru«m2^3tnW«^fiJfr«>^^tcffietLr=tcfc^o - 
*a«L. mEm2±fist^®(i. rnissmi ttAom^^s 

[ooi 7) :ct\ wrc*i±^st*. ±«Lfc«i 

50 it, tttafi§$a£±j£U ^«Lfctttattl«^«2#J!ii 



9 . 

mm t -r & & ? tzm & l r =t <t i> 0 

[001 e] ::t% mEH4^S(i, aa^4^ 

* fliJEIfc 2 tttnlf |8 £BJBfc U X Q^*: tffc-T * «*: O \Z 

too 1 9] c:t% TO8eRra*»»tt % -«rETO& 
i&E^x^s&Emi nmmmttzixm^m 

±fi£lT * cfc o tzmm. LX 4, J: I %. " 
[0020] c:x% BiJEBT^W^eii. HE«t* 

* 2 f*jn««fc«s6fi lt; «x * * o 
izmmLx*>xi\ itrffiora»3tjr^«r4. s<je 
mi mummtzmrst\x % «rE«*o!>tfv 

[0021] c:t% «rcTOss»«f*. miEm 1 

— ^efc&frCtoEttLTfty. m&&&^r-yjuz 
s^tN-c, mEiM£*flm££rafcLT» awxs* 

to 02 2] ccr% fSE&fSSSSi*. ^P3t*B»<bL 

U t(D1ktzmm. niIEi£<S5SSI*. BiJE^X^^-© 
flIEB&^S:£S<gL. MLfcBrtX^MLT 

*iram^tt«*3ttfeim££jgu bue«t^ 

SSJf^SI*. «IE^X&^iHrC«3«:iiiflt|8f-Bra3gj| 
St^LT. e#W«^fi£L. IftEBW^Stt, 19Ee 

E&<g^&l*. wTElMX^iaHSU BiJESfS^©!*. 

firEn»x£ft«u fltiEm2^Rjt^©(i. iJiEm3^ 

I*. BTtEBM-Xfc. B9EBff^TiU=fUXA(Oa6^r*$» 
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»=wrETOaHa>«aiJtsttLT. «x£±E*ra 

[00 2 3] :ct% BtTE^fi^Stt. STETOfcft-*. 
T. ±^£*tf-mlE*S^tefgf-. b*E— ^rtttHfk^tt 
LTWE*iB»|IS5fei«u b5ES<S£SI*. ^Eig 
^Xfcft^T. ^J^fceUEfi^^fimrc. b5JE- 

*i^ttHa*»LrWE«2H»||^«L. -BTEm 1 
1 0 eati t wTEIg 2 B§S*fl * -5 & n mt * 

to 02 4] z:r% BfiE^ig^iBtt. st,^ nijiBisj 

«*lfti:«<E4SI©?rM«iSfirETOfcJ6LT. »J(D 

T. £*£2*tfcliJE»J(D*S^1f«lfc. ffTE— ^ftttHSr 
£»LTSrE*1««tt££|*U BilGmfilt $ 
*a*ttfc|flEWXfC. ti9EBl0!)aH££&£fc 

^tfctt^T, ^***ifcWEW©ed«HRfz. TSJE- 

«»a 2 nsrn t 4 a^san ^ ^jbtt ^ 

IO O 2 5] 

[*«0)Slfifi<O^SS] 1. Bt^®(g->X^A1 

*mmtzmz> i ea>^jg(D«8§i Lt^g^v^t 

Ai fzot^KWt^o 

1 - 1 B&^li§vXf A 1 0>m&i 

30 y. siic^-rj:^^ ifi»io^m2o^ 

h3 0^LT««$ntl^ e 
[OO 2 6] IHMi/XfAlli, StlVraiL 

^>o ntruh§, &r^N t r um^-jj&om^-m. & 

lH*fm<D±ttmz'Dl\Xt3L* Jeffrey Hoffsiein, J 
i 1 1 Pipher, and Joseph H. Si Iverman, "NTRU: A ring 

based public key cryptosysteirf .Lecture Notes inC 
omputer Science, 1423, PP.267-288,Springer-Verlag, 
40 1998.fCt$L<a-<£*tTl** 0 

too 2 7] ^(S^tSiott. ^«>EtBLTl^3pxfc 
NTRuM«i:j:.4iK7;i,3"'J XA ^Jg LTOT 
X*^*L, i^Lfc^^S^S2 0^Ht 

tz N T R U Bt^xtfc J: 4«7iU=f U X A $Jg L Ttt 
1 - 2 iUfSigS 1 o (D«BE 

an&ss 1 01*. ^xEttsn 0 1 , mDim^aflpi 
o 2 . 103. -^isjttiaaftfip i o 4 . 
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l oil ftfctfJCill ^Wfcli, ^-<(<7 0zfn~tty 

-y-s ROM. RAM. A-Kf'f^^Z7h, f-fX 

[oo2 8] (i) ^xffimsni o i 

mil @SSOlSft3&^^$R£cFtL^o. 

(2) ttlntt*ft£fiRffln 0 2 

ttilMfc*S±j£flJ 10 2lt ^tf)*tf> k>*ltz t>h»rL 
e n(D:&£<Da»T*&*tttoim8Ra££tfL. £l£L 

fc#*nw*R a zmmmnm -\ o 3 "*w*r*« 

[0 0 2 9] O) lfriattinffln 0 3 

W«MtD«.1 0 3lt ¥:*t£tS8n O 1 AM^^F^m^K 

as*., aac tf*amnaji 031*. s^asLfc^xm^ 

«[R a ^ t> Lfc^ft F (m, R 

a) =m | | R a 

[00 30] r I I j 1*. ft/ ht£^£ 

^"To tfv ht£^£l^«f*(l 2O0)I^t*^ h*JT* 
MiL. ^*l£>£*S£;Ltc*i<7>£l 0(Dfi!<t-r*l£fET* 
<W*-I1 m = 1 O. r L e n = 5. R a = 7 <tf 
apXmOJf v h^i^l* M o 1 OJ . fi£ r L 
e n (Dtttottffli Ra(Dt> h^SII* r 0 O 1 1 1 J t 

&*cdt% tf ^ HM-LfctSjR-r*. r i o i o o o i i 

[003 1] 1fclSttfc]«i 1 0 3 I*. ±*£ L?-*g^ 

1EI&F (rru Ra) £B&^HbfflJ 1 O 5 ^fciifcT *o 

(4) -*fttt§IHStSP 1 0 4 
-*«M4Htt»l 0 411 — 2ffnltSkl§3& <t LT/N'y 

[0 0 3 2] CZt', *fiMM*£tl XtlZtltzm 

tX*&2> 0 CCIT'/fiL^/N^ V^§fj&hl*. ma 

(Dfilh (m) a^¥*ma>te£^*C<t6<ffi&T*fc*<fc 

<D&i£. gimSS. 1 9 9 7. 56 189- 
1 95^- is) lrHU<^b*lTt^ 0 
[003 3] -7jfo\±m%lW 10411 ^rfcEtiau 1 O 

B8»h^J:^a5H$teUrB8ttffih (m) ££fiJcL. ± 
J*LfdH»«th (m) oe^asJrT*,, 
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(5) B&^bfflil O 5 

v&mm i o si*. 1051. B»eiGflm 

1 0 5 2&lfM1bHM l O 5 3*£«l«$*lTl* 

[0 0 3 4] (Bt^filCtEfflJl O 5 2) HMffiffiffifitl 
0 5 21*. ^tf)0f-%@Kp £8&tgLTl>* 0 

(a»£j*» 1 o 5 1 ) a^itatam 0511*. -mt. 

Lts C-SSS(D^^^7 UIMJnffc* r a n d ( ) £ . 
10 fiCI 0 5 3^£iS2rr&o 

[0035] <nfrsnb§§&s& 1053) mbHsm 1 

05311 ^NTRUf&^3£<Dte^7^:?'JXA£ 
WLT* 0 mbBHk«1 0 5 3I*. flMftttftlflSl 0 3 

^^«^1WRF (m. Ra) ££i-ti*y. a&^fifcBBl 

051^ £>a» r £51*1* U . B&^filKtSfiP 1 O 5 2 An 

[0 0 3 6] ^(C. Bfr5Hb§33&«M 0 5 311 Sl+fco 

ftttttlofce^««F (m. Ra) IcBfJfiEHf ^TJU^ 'J 
20 Xi*£flgUT. BfrSHb*S^1f*8E (F <m. Ra) , K 
p, r) ££j£L. ifcl£Lfc*frSHb*S^1f!«E (F 

(m. R a ) . K p . r ) 1 O 6 ^fcfc^T &o 

(6) 2H3801 0 6 
&<S*M 0 6 11 B&*Hb*g£1**RE (F (m. Ra) . 
Kp. r) <t. KSfcllh (m) t^ftWfty. Sfclffco 
fcB&^b*S£ttf*8E (F (m. Ra) . Kp. r) <h. 

ISSSfilh (m) (hH^-^'fhao^Ltm 

S2 o^is-r>& 0 

[0 0 3 7] 1. 3 ^£2 0OM 

30 fis^s 2 o t*. shb»2 o i . «^b«i 202. mm 

ffi^5CBBteffli 2 O 6 & tfttttfM£tt«P 2 0 

[ O 0 3 8 ] ( 1 ) S*5SB 2 0 1 
»m©2 0 1 I*. 3HS&S1 o^^-f h30 
^Lt. Bt^b^e««E (F (m. Ra) . Kp. 
r) <tll3&filh (m) <t^SffiL. ft«LfcB&*§4bfS£ 
m«E (F (m. Ra) . Kp. r) mit»2 0 2 
40 ^ffi^lL. SffiLfcllimih (m) ^tb^2 0 5-vt±J 

[0O39] (2)(ff^bSJ202 

ffi^^bsp 202 r*. (s^^satss 2021 &nm^itm 

^2 0 2 2^^^, 
(ffi-^g|SBtg«i2 0 2 1 ) ffi-^&EtESB 202 1llf 

[0040] i^itmnm 2210) ijMHbun&ai 2 

2 1011 B&^^?&ffli1 0.5 3i^t^>Bt^7^i'J 
50 ^>o «<bilia»2 2 101*. 3*<gSB2 0 1 ^^Bt^t 



13 

fe^lW^E (F (m, Ra), Kp, r) 
ffi^SEtSfii 2 0 2 1 t>&-^@ K s 

[ O O 4 1 ] &(::. «^bl3»ffi 2 2 1 .0 tt. S*ii5 L 
fcfff-^&K s£fflt,vc % ei*&0*:BfrSHb*S^tfc*8E 

(F (rru Ra), Kp. r) IClMB»r Jl*=f «J XA 
^JSLX; flMe^flHBD (E (F (m. Ra), K 
P. r) . Ks) £±J£U ±l£L/c«-5MS^tfrfaD 
(E (F (m. Ra.), Kp, r) . Ks) £te*a&£ 
ffli2 2 5 O-vttJ^j-r^o 

C0042] (3) ||ffi^2 0 3 
1W«^6P2 0 3li. ^At*7 hSfc r L e n ^SStS L*C 
t^*o filffi^fflJ2 0 3li, ffi-SHtfi&2 O 2 
^IfcffiD (E (F (m. Ra) . Kp, r) ) . Ks) 
£SI*HSy. SftlS-Dfc«^^m«D (E XF (m. 
R a) . Kp. r) ) . Ks) MK^^e^ r L 

* * Ra^u fmsams* z> ttistmm 

U ^Lfcfc^Xm' £-S*ftt£§l&aJ2 0 4^fciJfc 
"*~£o ^fi£Lfce-^^Cm' £fg-5§-3tgat!S& 2 O 6 

[0 0 4 3] (4) -^foJt4li3S®2 0 4 

— 7arsu±§lf&fiJ2 o 41*. — ;5rsit£§i3M i o4*<wl 
r t n * / \ v is a. ia 55 h t m c / n v -> jx & £ ^ *> w u r 

L^o -^lSlttll»fiBJ2 0 4li. 1f«^©2 0 3ivt> 

l. ^fiJtUfcpaiih (m' ) £itissB2 o s^iu^-r 

[0044] (5) it&©205 
it&«S2 0 5&. S(Sffi2 0 lA^HSfeith (m) £g 
tttSy* -^folttilSlfiB2 0 4^^||»«|h (m* ) £ 

ettJ&* 0 itisaj2 o 5tt. -sftffi-h (m) tm 

4. *f^\ £dcL fcit&IS^ j ^it^emSBtgSB 2 O 7 
[0 0 4 5] (6) ig#^Etg«i2 0 6 

( 7 ) WMGtBfl! 2 0 7 
it&*S*£tM5 2 0 7 t± % JtRtSX j £82tg-r*fctf><D 

i£{§££S i 0(D®bfi=r;:oi^-c. §4 ~S 5 (c^-f :? □— 
[0046] f*ill1ff«^» 1 0 2 moti!*gRa£ 
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*rr* (xtt/T-s i o i ) . mmtttom ^ o 3 
it. ^XEtg©l o 1 A^¥:Xm£S<?*a5L (x^?:? 
S 1 O 2 ) . 1 O 2fr*ntDte1BiR a £ 

Sl+ffiV (^f7^S 1 0 3) % K^fctJLfc^XmiS 
tf-&-^-ttHJlfc*BRa t«»Lt, *S^t?N8F (m. 
Ra) ££*U ±J5&Lfc*S£t1H8F (m. R a ) £flf 
WMPl 0 5^ffi^-r<b (Xi^^S 1 0 4) 0 

[ o o 4 7 ] *fc. fi&^^taj io5^ tzsmm F 

<m. Ra) £Sttl&y. ftltaiofc^m«F (m. 
10 Ra) fCBt^T^=fUXAE^JSLTB&#^^tf«iE 

(F (nru Ra) , Kp t r) L Uf^SI 

0 5) % ^Lfc*%<t«*««E (F (m. Ra) % 
Kp. r) ^^(g«Jl 0 6^til^}-r^> Uf^SlO 
6) 0 

[ O O 4 8] *fc. -75Slttii»ffi 1 O 4 fi % ^5c8£fg 
© 1 O 1 A^^^m^S^tiJL (X^-/^S 10 7). 

li?SlfIh (m) ^^^£L Uf*;^Sl 0 8) s ±J5£L 

fceasafih ( m ) £ai<s«n oe^ai^ti (xt-^37 c 

20 S 1 09) 0 &|SaJl 06tt, Bt^^^ft^E (F 

(m. Ra) , Kp. r) I^Sffilh ( m ) t&9tH 
ft l J«-»ltttofeHlblt*MlE (F (m. Ra). 
Kp. r) iHSHh (m) tH>$-^t/^30 
£:*LT£<S£ffi2 0^&{rt* Uf^Sl 1 

0) o 

[0 04 9] 1. 5 mS2O0)^ 
S(S^S2 OOStlf^fCOlNT. @6tC^-T^D— ^Y — 
h^ffllxTltt^-r^o «8*B2 0 1|*. ^|g^ST oAn 
b>T^-^-;h30^Lt, Bff^<fc^1t#E (F 
30 (m. Ra) . K P , r) <bli»0h ( m ) i^SfgL 

(x-^-v^s i5i). amufcie^te^w«E cf 

(m. Ra) . Kp, r) ^«^bfip 2 O 2 -^til 7J U 
SiSLfcliSaHh (m) ^it5S«J2 0 5-.tii^T^ (X 
^rt/^S 1 5 2) o 
[0 0 5 0] MHt»2 0 2tt. B&^b^^E (F 
(m. Ra) . Kp. r) ^SlfBiy. SftBSofcBf-^ 
ItlS^tiMBE (F (m. Ra) . Kp. r) fCf&^TJU 
=fijXAD^LXtg^#ttffiD (E (F (m. R 
a) s Kp. r) ) ££tf£L (X^f-y^fs 1 5 3) . & 
40 -SMS^iflBD (E (F (m. Ra) . Kp. r ) ) 
®^SP2 O 3-v£tJ^f^ <X^«y^ 0 S 1 5 4) 0 
[00.51] «^^gP203l*. &^t£<£mmD (E 
(F (nru Ra) . Kp. r) ) ^SI^HSy. gtfS&O 
fcffi^-^m«D (E (F (m. Ra) . Kp. r) ) 

^V^S 15 5). ^«Ufc««m- £-*|S]ttHa 
SP2 0 4-v£iJ^L. MLfcg^m' ^ffi^XEtSffl 
2 0 6-<S^iXt7 (X^-y^S 1 5 6) . 
[0 0 5 2] -*filttH»»2 0 4te. (g^3tm* 
50 Itiay. Sl^otmm' fC/N^^ZLliSjhlC.fc^ 
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3**«6LTHttfflh (m' ) ££R£U &.tfLLtzM$l 
ih (m* ) Zttmto2 0 5^£fc*rr* (T.'TVZfSI 
5 7) o ;*t«8SB2 0 51*, HU&filh (m) JsBflttfilh 
(m' ) ^St-Hay. Sl*B*^*:§f)S*iIh (m) ill 

'^S1 5 8) „ 

[O0 5 3] 1. 6 Slt&(D»l8(=^tt«lbmBE^tt 

Kmc. Mtt4>ra(z«iit«mHMa)ttttir=oL^T 
tt4Mytf*±LTi*4:i**#i::Jsivc. 5ffi^tS2o 

<Dlt*&«J2 0 5 A<ttl*-r*lt«e« j ttttlc 1 T'&* 0 

[O0 5 4] g£fc % -«#RtjM£Ltl^MI^ S 
«^tS2 O 2 O 5A<aS*r*tMR«* j A<1 <!: 

fc*»3M*. BD*k S«S1£2O(D~^lRlttPt»«P2 0 
4l:i£oT£j££*L*:h Cm' &eStClO<D— 
*filttH*»1 0-4tCj:-DrA«t**Lfch Cm) £<B#I 

0 4&tf— ^fiIttBBtttt2 O 4fC*Slvt. k \fv h<D/\ 
[O055] ttot, *Wc«»ya6t*AUfci:#. 

3Mm2ocj:u£is«n«itKi» j zm^z^t 

izx^X. i-2~ k o?fS^T% MMy£<JB£LfcC£ 

4 3ttf— *MfcH*tt2 0 4T^b^^*;vaHli! 
^SHA-Untf, SHA-1li1 6 O t*7 h(D 

to 0 5 6] ^^-^«yh30^LTIfi? 
[0 0 5 7] /N'yy^CSHA - 1 

1 6 o tr v hu±<r> : t>(Dtf&t>tLZ> ^ £&&i^<dx% c 

lifiJty 1 (T>^r—5m^itis*7-J*(n 

*m©»S&™*a«flA<'J>fc < y . ®^3»^*<rsj±-r 

[O0 5 8] S±ttfCOlvCI*, /N*;ya||» 

I*. ffia0tefr*Aa<Dffl£»*^£l*B»Tfcy, * 
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efc 9 & Mult i pie Transmission Ait ackf::^ LT, 

(onmx-it. vt&w i (Df-^BKWti/xf a* y tit 

[0059] ftfcftffilz^*^ VX^CD** 

io t&cx. a«««HC*X£M<bLT£i»LfcB»x 

Mul t tple Trans mi ssion 
A t tack tm$tlZ> 0 

too 6.o] ztLiotL. *9ma>f»uiz±z>t+ ais 

ig^lc. WetttttHC-efeoTt*. m | | R a Oil 
20 (*. aflUMNKIItity, Multiple 
Transmission Attack 3r5§ffiT* ef 

[ o o 6 i ] ^fc, aa»o«saaR^t^«>rc % 

«^ot^ ±EtH«fcur. TctD^xiig^^: 

2. 

[0062] 2. 1 ttftlflm<DK&ftl 

30 Bt^amv'X^A i icfci>T. ttinflM^fijtap i o 2 
* -r ax $ > :?tefaxtt -h o > ^ m ^ ^*r-« <t l r 

[00 6 3] ^ttrlff«^dt«pi 

O 2*««JllflMR€^rtr*««Rp«lT?fey. 

i*. a. b s b*. s y»^^»fiSt$tt-5@ 
40 ftttm-efty. mn£*t*«L 1 <DfiiA?*Dm$n^» 

[OO 6 4] 2. 2 *£^te*8F (m. Ra) mtUO^ 

*m£tttote«Ra££tg^LT, F (m. R 

a)=m| I Ra^MlhTZt LTl^^ «ttS^ 
I*. tt*Pm^^SO*<mC7>Pr^^T'^,tLli\ •f-CO^CD 

[006 5] BHES:ai^2fe^#tf)T. ^(nttKOm-XL-Zft 
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( i ) MihJ5& i 

tS^faffiF (m. R a ) = m | | R a 

-cr% r I |j t*7^^t 0 (zom 

*o ) 

^fc. *S^tiff8F (m. Ra) =Ra | | m^rLt^i 
l\, 

[0 0 6 6] ^fc. ¥:*m£4 tfv KfO(Dl»»fl<Dai 

[006 7] (2) SCai^Sfe2 
*£^te$8F (m % Ra) =m (+) R a 

©atjftt. &©ay-e&*. 

fg^-Xm' =«^W«F ( + ) Ra 

(3) Wffi^3 
*S^1fffiF (rru Ra) =m+R a 

[0 0 6 8] »3tm' =^ffiiF-Ra 
(4) 

to"aHI3&F (m % Ra) =mxR a mod p 
[0 0 6 9] 

fif-^-lXm' =^i#F/Ra mod p 

(5) JCffi^2&5 
*S-8-1f$8F (rru Ra) =BitPerm [Ra] Cm) 
--"C. BitPerm [Ra] (m) R a f-^l^T. 

[0 0 7 0] JM*ttKI* % UlT(0«fc ?Mt*T?fc*. 
(5 - i ) i 

(*H) S^mJCOm= M i i 1 0000 1 1 1 lOOO 

oj ^«eu Ra=3 d om^m.) ttht. is& 

M 0000 1 1 1 100001 1 1J tU 

s. 

[007 i] c:t% Wsfatotzv hD-f-h^LT 
F£, RafvhfcU M^t'^hD-f-h^ 

(5-2) 
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100 7 2] («) Ra^12 8f>yh^t^ Ra 
V>Attf£l*, m$t~? ha-f- h£i±£„ £ 

[0073) («) Rat128e9 Hit*. Ra 

(5-3) ^ffi^2fe5-3 

®*M9*8§{-, RalC^fS-r^)A£li^l4 tf-y 
[0074] -CT\ afef-^JHi, 4 t~*y h<D£& 

20 i emtt 0 <«*.« % ru ) 

-y h^jri. rooooj. rooou , rooi 
°-» * • • • . Mnoj &tf M l 1 1 j T*&* 0 

-tLt»(c^-r^ i 6e<o^sie&t*^ kwhu r i i i 

ij. Miioj. rnoij t - * • . rooo 
i j 2tt>* rooooj -c&£ 0 

[0075] sqon r 2 j ) OR ale 

30 i j % finoj, rnoij 4 • • . rooo 

°J^ r OOOlj T?fc* 0 C(DJ:^^ R a (DfilfC 
[0 0 7 6] &&mmr&4tzy hf-DCEtBottta 

(6) mtii^e 

^tf«F (m. Ra) =Tab [Ra] ( m ) 
40 CCt, Tab [Ra] (m) tt. m^m^~y)lT 
a b l:^ot»^: ^ £^r o 

[0 0 7 7]«^(^ mA<8t>^(OJ|^ R a (Dfit 
S/C, i7IZiFn^^f-7JHab^ 
EttLT^^, tfef-7*iHab«ot 4 m<7)fil£ 
Sfetic tftf-^Habli, Bbf^ h<Omt 8 t" 
^ K0tt**tB?ftl+fc|fi$2 5 6®^. «itK. m = 

[0 0 7 8] *fc, *©ayT^4. *S£ 

50 lSiF^f-7*iHabf:Sot 4 -tt£i2»^rHjic 
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^ffi^iSl 0«tS«^S2 0<tfcfctNT. tt*Qteffi£* 
[O O 7 9] (1)|1 <D&ff2#J 

O bA^fctftC^*,, 

[0080] ^fs^tsi obsi;aigsiS2 0btt, ^ 

1>T. i^lSSSl 0&tfgegfS2 0£(D«S££*'k 

tLtMti 0 ansssiEi obi £*fc. mm$n 
±&m i o 2 (ztt^r. ttftannzi&im i o 2 b £«t*_ 

Tl>* 0 £fc, SiSg|S2 0bll ££>ic. f5]l&«S2 0 

8&t;t=tipm«^fiS:ffli2 o 9£«&*t(a* 0 ft&ttlO , 
7^w208<t:ii smkehsm o b zitLxmmz 

tlXl^Z* 

[OO 8 1) fBjJSBan 07tt, SL^XR^^RJtL. £fi£ 
L*:SL&XR£S*ffl|s]*$4 0 b ^^LTf^S«8P2 O 8-* 

ai*nr*o ^fc. ±tfLfca»x r i 

X s tttiDtem* a ££fi£U £j£Lf-ft*Dte*8Ra£1g 
«tt*D«ll 03-stti^-r^o :Ct\ fflJ&XR£fflt>T 
tt*Oli*aRa££frf£-<fl£LT. tttom&L±&to 1 
0 2I*. afgrXR^^<D^^ft*Plf«[Ra<t-r^ 0 
[OO 8 2.3 ^fiH2 0 8li, SfffllEl^4 0b^^L 

tt*nte#8XR£&itS&y. Sit&ofcttflnraiSxR 
^ft*Dm«^RJcfiU2 0 9-ai^^i o ttiureia^Rjmi 2 
o9ii t mm&2 o sa^su&x R^sitmy, sh-i* 

ofcaSSXR^ffl^T. tt*0tBf8Ra£ifcJigU ffctfcL 

fcttaorei&R a &mm*&m2 o 3— ai*-r^ 0 c: 

X\ &&XRZm^Xtt1SltemRa&£l£TZ>--W£L 
ttft]tefa£ricSP2 O 9f£. SL&XR£^-<DgE£ttft] 

[OO 8 3] (Pt-^@fg->X^XK 1 b<D3&f10 Bf-^iHg 

[00 84] 0M1O7I1 SU&XR££|£L (X-x 
•^ f S20D . i)SLMXR$5«4 0bf 

^Lri^^sn2 o 8^ai^i-r^ (xt^s202) 0 
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Uf^S203) 0 tttDmm&m&i 0 2 It. 

|H)8Jffll1 0 7A^SL3&X R£»l*l*y % Slt^o^ft^ 
XR^ffllNT, tttDtfcffiR a ££|£U ^flt Lfcf4"jto« 

«r a zmmtttnm-i o 3^ai^-r^ (xf>^s2o 

3) 0 

[0 0 8 5] I^S8aJ2 0 8l*. SffflBfcM 0 b £*fL 

r. sl&x R^fti-faiy, si+i&ofcsufcx R^wnm 

«^fi£fiiJ2 O 9^t±i^-r^ (X^y >^S 2 0 2) 0 ftfr] 
tfH8£j3cSP2 0 91*, ^^fflJ2 0 8Am=>SI&X R^Slf 

io Hau. fti+Kofca3&xR^ffluT. ttmmmRa£± 

JSfcL Uf^S204) % ±l£L*:ttfr]te*8R a 
*8B*2c«S2 O 3^aj2»T*> Uf^S 20 5) 0 1**8 
»*ai2 0 3tt. ft*Dm«Ra^Stf^t; (X^r^^S 

205), fti+aof-ttioflWRRasm^r. la^is^ 

»ba^m' ^dcf* Uf*;^S 2 06) 0 
[ O O 8 6 ] (2)^2 CD^fl^ 

Bt-^-affivx^A i <o%2o-&wmt L.x<nm^mfe*> 
(p&^ansv-x^Ai comm it^iisvxfAi c 

20 I*. Si ofz^-T^^t-. 3HS&S1 Oc&tfSfS&K 

2 o cfrz>mf&znz> 0 

[0 0 8 7] OcMi8gfi2 0clt ^ 

B&^fi<g~>X^i*l £«U£-f£2HSSSl 05: 
tfS<SSSS2 0<t. ^«^Ltl^ 0 IfS^s 
i o c (4. ttinttfl^tftflJ i o 2 ;&tfi£<safl 1 O 6 left 

a_T. tt*0te*a£j£«n 0 2 c&yififflll 06c^i 
7LXl^Z> 0 gSfc. 5fi»1S2 0c{t 1fcf8l$*fflJ2 0 3 

Steffi 2 O 1 f-ft^T. ti«i^SP 2 0 3 c 
*5ffll2 O 1 c £«&iLTl>£ 0 

30 [ o o 8 8 ] ttintem±titm i02c. Steffi 106 

c . 1fc«Rfc^ffi 2 O 3 c &tf SfSfcJ 2 O 1 c (i, ^rtif 

timnmtiLZL&m 102. ans© 1 o e , m 2 

0 3&i;g<S«S2 O 1 ^H«<D«iBJc^L-Ct^^ 0 jut 
102ctt, ^RlcLfc^iDm«iRa^ii|«giil 0 6 c-v 

[00 e 9] ^ffisui oecft tttomm±f$.M 1 02 

c^t»fttoffi«lRa$Slt^iJ. SltB5ofcttto1W«R 
a^^>^-^-;h30^Lt, SfigS2 0c^l 
40 IStio S«SP20icli. o'c^b-f^ 
-^•vh3 0^LT, ^*Dl^«fRa^SiIU. S« L 
fcttfrJUfSfiR a ^^«^SP2 0 3 c^fcfc2>-r*o 
[OO 90] tt«l^efi2 03 cli, SteBU 2 O 1 
f^*Dm®R a ^St-tlSy , SH-H&ofcttfriraSBRa^ffl 

(B&^&tev'X^Al cfl)®m HfligyXfAl c 
<7)®if^tcoi>T. gli 1 iz^-T^a— ^-V— h^ffll>T 

[0091] ^fc. B&-^iim->x^Ai c©af^tt, e& 
50 ^-®e->x^jui <Dmfttm&X'ibZ><DX'. ::t-i^ 



21 

it*£4"i><!: LTMt^ 0 tttom&£j£® 1 O 2 c 

3 0£:frLT. 5fgStS2 0c^<g-r^> (Xt'^ c S 
2 2 2) „ 

[O O 9 2] 518812 0 1 cl£. i£te^g 1 O c6Nb-< 
>*-*V h30^LT, ttiHl1f*8Ra£S{SL. S 
<SLfcttftltf«R a £tt|Bf&iSB2 O 3 c-vii5^)-r^ 

(X^rt/^S 2 2 2), tS*BRfc^«i2 0 3 c tt. gfggfi 
2 o i a^ftintfciSR a Uf*;^S2 2 

3) . SI+BSofcf^iDtgffiRa ^ffl^T. fc-SHS^iffg 
^(S^Xm* Uf^S2 2 4), 

[oo93] (3) n3o>mi&m 

Bl^HgyXfAl ^3^«<1: LT(D8W®*g:> 
2 O dA^&ric 

[ O O 9 4 ] £<g^S 1 O d Ste^S 2 O d l±. ^ 
1 Odlt tt*ntS*&£j£S5 10 2. B&^bfflJ 1 O 5 

2kiSMi o eizft^T. ^Znm^figfiu i o2d. hm- 
Ibffln 05 d&tf&fggpi oe d^tt^ e 
^8iS2 o d te. «4:«B2 o 2. fflRK£fi|S2 o 3 
&tf«<S£B2 0 1 fzftiLT. «-?Hb«J2 0 2 d. raiaBfc 
S&SJJ2 O 3 d&tf5H§8B2 O 1 d £fgiLTl>£ 0 

[0095] mnmmtmtin o 2d . RHHban 05 

d . &<S6fl 1 O 6 d . fSL^it&l 2 O 2 d . <WI8B**$i 2 
O 3 d 20 1dlt ^^tltf 2Dtfc$&±dtSP 

10 2. m^ritB 1 0 5. ig{g§M 0 6. «^<tSP2 0 

2 . mias*^ 203 &v&igm 2 o 1 1 mm<r>m&* 

[0096] ttln1im±j«* 1 02 d(±. tt*Dfif$gR a 
ai^-r^o BM-<b& io5dit ^tJnm«^^sp 1 o 2 

dj&^ttftlteffiR a £g(-H&LJ, gltBS^fcttfrHf^R 
a»=:l«TiU=ruXA«ttLT. R&*HbttJnffifBE (R 
a. K p. r 2) £ 0 C ^ "C. r 2 I*, r £ fs] 

*£0>a,&-Cfc* o ±*£LfcBt^btt*Dte$8E <R 

a. Kp, r 2) £2lfg6& 1 O 6 d ^fcij Z> a 
[ O O 9 7 ] 1 06dtt t m^itU 1 OSd^b 

B&-^bttfrHE&E (Ra. Kp, r 2) £Slt3RLJ, § 
ttttofcBWfctfJtoflWRE (Ra, Kp, r2) > 
5-^7h3 0^Lt, S^S2 O d^SHST*. 
3fgSfl2 0 1 dli. Sj|gS2 O d^-f>^-* 9 h 
30^Lt, Bt^bttinraiBE (Ra. Kp, r2) 
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£»eu seLfc^<b«mm«E (r 3 , k p , r 
2) ^er^HbS2 o 2 d^tti^-r^o 

tOO 9 8] fi^bSJ2 0 2 dtt,.gfSSP2 O 1 dfrt, 
^tttlDiSilE (Ra. Kp, r 2) £Sl«*lJ, g 

tfto-otzm^ittttamms (Ra. k p . r 2> 

T;U=lUXA^LT. «^ium«D (E (Ra. K 
P. r2) . Ks) ££f£-f* e *[C. ±ritLfr«-5|tt 
iDtflfiD (E (Ra. Kp 4 r 2) . K s) £tfr$a&^ 

®2 o 3 d^as^-r^o 

10 [0099] raim^fci 2 O 3 d t£. S-5HbfflJ 2 O 2 d 
fr£m*hfaDflNBD (E (Ra. K P . r2) . Ks) 

SW&ofcffi^tttolSffiD (E (Ra. K 
P. r2), Ks) £fflt^T. £-5MS^tS$gD (E (F 
(m. Ra) „ Kp, r) % Ks) 6^^^g-^^m• 

(Bf^aig^X^Al dCOii!^) H§MyXfAl d 

turn?** 

tOI OO] B^IigyXtAl dOitjf^tt. B& 

20 ^Sig->X-^Al(OS}f^<»:^T*&^(D-e. CCTMiffi 
££ ^^^^ LTB4^-r^ e «-JD««tt«» 1 O 2 d 

•*<b»1 0 5d^t^, (Xfv^S 2 4 1). 

itm losdii, tttBmm?£m& io2d^b w tonus 

'JXA^tSLT. B»1b^tD«fRE (Ra. Kp, r 
2) ^«L. ^«LfcB»<bfl1n1««E (Ra. K 
Pv r2) £&<gai 1 O 6 d^itit}-?Z> (Xf-;^S2 
4 2) 0 

30 [0101] 2HBtn i o 6 d li. R&^lbai 1 0 5d^ 

«#1tttAl1ME (Ra. Kp, r2) £fil*flfcy, g 
It^ofc^^bt^inmffiE (Ra, Kp. r2) 
^-^7h30^Lt, StS^S2 0 d-vii<t-r^ 
(^^^S 2 4 3) 0 5iSfiP2 0 1 d tt, g|g^S2 

E (Ra. Kp, r2) ^S«L. Stt L /cB&^bf^&J 
tt^E (Ra. Kp, r2) ^g^bSfJ 2 O 2 d 
-?Z> (X^r-y^S 2 4 3) „ 

[O 1 0 2] fi^bgP2 02dlt SigfiP2 O 1 d*M^ 
40 Bt^-^f^ium«E (Ra. Kp. r2) ^Slt^zy. g 
ItSSo/z^^bf^illlt^E (Ra. Kp. r 2) fZffi-^ 
TJUrf UXA^SgLT. S#^*D1W^D (E (Ra. K 
P. r2) . Ks) £tft Lfct§^-f^3tatt^D 

( E ( R a . K p . r2),Ks) 2 0 3 

d— aj*rf £ (X-x-y^S 2 4 4) . 

[O 1 0 3) 1Sffi^ai2 0 3 dlt g^b©2 O 2 d 
6^S^-#*D^ffiD (E (Ra. Kp, r2). Ks) 
^SltlSy (Xf';7'S2 4 5) . o fcffi-^f^ln 

tW^D (E (Ra, Kp, r 2) , Ks) ^ 
50 ^^m^D (E (F (m, Ra) , Kp, r) , K 
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s) frZ&^'Xm' ££R£-f& (Xf^S 2 46) 0 

niximmcomm. ts^tfi*F (m. Ra) ittitD^ 
jnivciMrr&. 

[0104] ctDSEiz^-r^fc. tt2nlMta>#gftfl) 

(m s Ra) &ih<o&tem. &vttiDmmz*m?z>tz 

*o -<D*UC7f^«£?fC. ^te«F (m. R 

a) miUO^ffSMHO)^. m| j R a tZ& &^^tH$}(D 
Stti:£&l*. Bl^aiSvXfAK 1b-1 dlzfctN 

[0 10 5] CCD^^7f^,fc ?f-. fc^tflBF 

(m. Ra) U&<Dmm<DO*>. m ( + ) Ra. m + 
Ra. mxRa mod p. BitPerm [Ra] 
(m) . Tab [Ra] (m) tZ& Z>&<Sttem<DUth?5 
H^liSvXtAl b~1 dfCfcl^T. jgfflW^ 

[0 1 0 6]_ (1) Bt^a^ixX^rAl I*. ^(D«i z>tZ 

SUS^S i o co-2f ran±§83Sia$ io4il te*Bfttn88 i 

O 3^£>*S^1f|&F (m. Ra) 1*8* Lj . g ft© o 

TcfS^UHgF (m. Ra) y V J-Hi3&£»£ L T . II 

S&filh (F (m. Ra) ) £±« U £tfc L h 
(F (m. Ra) ) ££fS8fl1 0 6. Y>£— h3 
0. 5HS«U2 O 1 £fr LT. j±ISfflS2 O 5^i§-r>£c 

[0107] &<ssfi 2 o (D-Xfoim&m 2 O 

4(*. iS§M2 0 2^bfi^lS«D (E (F 
(m. Ra) . Kp. r) . Ks) ^gltlfcy. glfS* 

ofc«^fS£1$H8D (E (F (m. Ra) . Kp. 

r) . Ks) rc/\-^>JLB8»^i6LT, Ifflftfilh (D 
(E (F (m. Ra). Kp. r). Ks)) 

L. £l*L*:Httffih (D (E (F (m. Ra) . K 

p. r) . ks) ) &ttmm2 0 tt&& 

2 0 51*. Bfi&filh (F (m. Ra) ) t % lil&fiS h 
(D (E (F (m. Ra) . Kp. r) . Ks) ) £it 

[0 10 8] Ctf)<fc?(zLT. ^X6<IEL<ffi^T'#fc 



(13) ^2002-25 2 6 1 1 (P2 O0 2-2526 1 1 A) 

24 

a) ££j£T*o ::t\ G<7>*{*#|(*. G = R a j I 
mT'&S* #fC. te&ttttJfflM 0 311 ^RJcLfz^^m 
«G (m. Ra) £-;*rS)!4|y}&«J 1 O 4 ^ffi *f * 0 
-^fSl14^«Jl 0 4 14, flMBttftflPl 0 3^b^ 
ISG (m. Ra) £gl+«&y. Stf-H* O $5^11*8 G 
(m. Ra) l:/N^>aB8»SttLT. BlSlfil h (G 
(m. Ra) ) ££fi£L. ±J*L*:IMMIh (G (m. 
R a ) ) £&fSSfl 1 0 6. -< >S— * <y h30, SfSSfl 
2 0 1 £^LT. ±t&«J2 O S^&1£-?Z 0 
10 [0109] SfSSS2 0 0ffiM^2 0 3 

l*> ±«Lfc»Xm* Xtm&R afCG^ffi 

l^T. *S^1fc*8G (m' . Ra) ££ldcLT. -^fSlte 

§l»fiU2 0 4^ai^-r^o :ct\ ii«^su2 0 3 
r B it^ i:a»Ramti 0 — ^rattimsiffij 2 o 4 

I*. ^W«G (m* . Ra) ^«l+ttiy. SltlSoyc 
^^tfc«G (m' . Ra) IC/N v ~> ^Ml&&m L T . B3 
S&filh (G (m' . Ra) ) ^gtL. ±J5JcLtcg§3l&fi| 
h (G (m' . Ra) ) £it«*ffll 2 O 5 ^ih*)-f *> 0 tt 
20 &«12 0 5I*. |§»fi|h (G (m. Ra) ) t USSfil h 
(G (m* . Ra) ) <t^tfc5SLT. — Jfe-T^^g^^ 

[OIIO] ^<DX ^fzLT. ^XA<iEL<^r*^fc 

(3) B&^7JU=f»jXAa^ig^T;U=f UXAtt. ±8S 

(DBt^TiUzf'jXA^gfflLTtctlV DES 
P&^-^iC. RS ABff-%^C-\?>E I Gama I Bf-^^^^C 

30 [oi i i] -^rnjtiig^ai i o 4 (i. /\^*>^ 

SABf^iC. &I^E I Gama I B&^-^xtfZOl^ 

ra^si^. oj*«jg. ^ftB&^- . v-M-x/m 

[O l 1 2] 2£>f~. ->x^A^]ffl%^:^r— ^Rii4B8 

40 ( 4 ) *&mmmT'iL ^isss i o <t sts^g 2 0 

tl*, -f>^-*v h3 O^^Lrm«g$tLTL>^t L 

[O 1 1 3] (5) -tSSfc^-r^^T'fe^xi: 
^3g-T ^) =3 > ta--? ^ D 7 ^ AT' 5> t L T t ck L > 

50 ^^D^^AXIiBJlE^^^JUfg^^zj >ea-^a^ 



25 

/N ~ K-r-fX^ CD— ROM. MO. DVD. DVD 
— ROM. DVD-RAM. U £\ IdE^ 

Lfc*,a>£LT*,£l\, C;ft^<DE$i&**lzEg 
£^LT l N £> silE^ Ixfcf — $ ^AXttliJE^* 

[on i 4] ^f c . I0E=i>tfj. — 

*^D^A£Et§LTJsy. STlEv-<<7D^ c n-t? ry-* 
[0 115] ^/c. WHS^D^^AXttB5ET^^;Hg 

f^^e&L-c^si-r^zirrz.fcy. »:£L*:*fea>=i> 
(6) ^SB^o»^stfjisa^«ii^^^nifl^^ 

[O 1 1 6] 

&tfmTE®^:*<!:BiJEmi§l3& 
ffi£«MU WEffi^X^tt^LTtt-sr**^ BiJ8E 

e« -^x t* inE^^rc— sk-r *> <t wr * sisss** ^ 

*Rra«jr*s:t. ffiE*s^isw::»^T>u3~uXA£ 
miEmi fttnra«<»:^-<Dm2^iDfii 

[0 117] fiJE&fgSSI*. ffiTE 

e£*Lrai«u iPiEafg^ett. iJjEB&^b^is 
e^m«&^« 2 ft*Dis«[rcBnEorffi35m<Da»36s^jg 



s 

04) ^2002-2526 1 1 (P2 002-2 52 6 1 1 A) 

26 

[0 1 1 8] CCT% WEiri£Am&Di||fiff2£ 

sei*«^»atfiaE«2±rt*»A«. ^lt, *ti 
■r*tBi-rt»(D« i ftium«&vm2f^inm«^±^-r . 

[oi i 9] cc-e. B*E!g i £j£^fSte. «.&-£££ 

rc^^xt. neii£Mim; % asa^iNTiim 
[o i 20] cc-e. mmmmn^isttz* bse^r 

6WE*2f*JHllWil*»«iLT««-^^BJfr'S. ceo 
L. 1JIE^pIJS»^S:^©«:. «IEI»IS61flHftfr *iRE 

[Hi] WItti/Xf A 1 ©irt^St^D v^BT? 

[0 3] fi^bffl2 0 2(0M^t^D7^it^ 
30 4. 

[04] gjg^si ocosb^^^-r^a— ^v— h-efc 

*«> 05|Z«K O 
[05] ^<SSS1 0©Slft^Tst7D~^^-htfc 

B4^btt<. 
[06] »£g«2 0 0)»l^^3F-r^D— ^v— hT'fe 

[07] «ffi^6lCfcl%TJIIl^n*SM^ — 

[0 8] Bt^aig->x^Ai comi (ommmt Lx<om 

40 ^MvXfAl bOM^t^Dv^itaD^o 

[09] BWiMvX-xA 1 bCO^^^-T^D— ^-r 

[0 1 0] Bfiigi/XfAl 0&2<0&ftm£LT<D 

[0ii] Bt^-Sili>^^A i c<D®if^£7f.-r:?a— ^ 

[0i 2] m^&mis*Tj*-ie>n3<ommtLT<o 

[0 13] B&-1-S<IvXtA 1 d<D»ff©JJft^t7 



(15) ^200 2-25 26 1 1 (P2 OO 2-2 52 6 1 1 A) 

27 28 





1 0 5 






1 0 6 




1 B 




2 0 1 




1 O 




2 0 2 




2 0 




2 O 3 




3 O 




2 0 4 




1 0 1 




2 O 5 




1 0 2 




2 0 6 




1 0 3 




2 0 7 




1 O 4 




10 2 O 9 





t0i 3 




****** XtJ> 



[02] 



105 

r 1 



1051 



1052 



Kp 



1053 



(16) ^§§2002-2526 1 1 (P2O0 2-252 6 1 1 



[i3] 



n 4] 



202 



Z021 



Mans 



2022 



^^^^^ «fiD«« 


O) Ra: 

ass 


(2) Ra: 


(3) Ra: 


(1) m|pa 




C2> m©Ra 


»^iS1B->^^A lb-Id 


(3> m+Ra 


(4) mXRa mod p 


(5) BitPerm[Ra3{m) 


(6) Tab[Ra](m) 



[04) 





r 






r 






r 










> 




S WK o fc«£flM' F (m,Ra) £ =f U X AE £ ft L T 
Bg^<be^ffiSE(F(m f Ra),Kp f r) 




f 


BS^fbSBtt, £&LfcB&^fct££f^E<F(m,Ra),Kp f r) i 




r 





SI 01 



SI 02 



SI 03 



ST 04 



SI 05 



S106 



SI 07 



0 



(17) ^2 002-2 52 6 1 1 (P 2 002 — 2526 1 1 A) 



[®5] 



® 



/WvaB8»hlCj:S5l6«[«J6UT!!8»ffl h (m) €*EJ£TS 


> 


r 




> 


r 


Mtt«h(m) 
WK«th(m) fc€-f 


f$BE(F(m,Ra),Kp,r) 
t«E(F(m,Ra 1 ) I Kp,r) t. 



SI 08 



SI 09 



S1 10 



C 



a*7 



[07] 



[09] 





lii*J<BTab[Ra3<m) 


0 


122 


1 


39 






255 


91 






S204 








S205 






S20G 

r ^ 







(18) S692002-2526 1 1 (P2002 — 25261 1A) 



(@6) 



1 : ■ 

E(F(m,Ra),Kp,r) fcHS 


MB h(m) fcfcgfIT* 




r 


SfaSBti , «m L/ *:BS#<bte^a« E (F (m,Ra) ,Kp,r) € 

a^ba^tt*u, s^ufcBaafii h(m) tjuKa^maT* 


i 


a^fbSBtt. BfrtHb*£-&«$2E(F(m,Ra),Kp,r) tSttflXUv 
a^e#ffi«! D(E(F<m,Ra,),Kp > r)),Ks) 




f 


a-^fbSSfct. a^lS#t»«D(E(F(m,Ra,),Kp,r)),Ks) £ 


> 


r 


fil«l$:&SBli. a#JS^flT«D{E(F(m,Ra,>,Kp,r).),Ks) taWRU. \ 
SWU- 3 ^a-^te^flf«D(E{F(m,Ra,),Kp,r)),Ks) #6 


> 


r 


M.UJfctt*fcin , ttt*XB!lt*^»#&.fc i 


> 


r 


— %MMWlt« -mxm'Mitlij » 

L fcHSftfil h(m') ft ifcKSf'sm* f 5 




r 


Jfc«SB«. H£[<gh(m) £H 
gl«RofcWafiSh(m) 


m')£:*Jktt'LT. — 



SI 51 



S1 52 



SI 53 



SI 54 



SI 55 



SI 56 



SI 57 



SI 58 



1*7 



(19) ffl2 00 2-2 52 6 1 1 (P2 002-2526 1 1 A) 



[08] 



10b 



107 



102b 



105 



101 



(m) 



F(m^a) 



E(F(mJH) 















s 




103 




104 

















106 



40b 



30 



lb 



20b 



2oe 



201 



202 



, 209 



E(Ftm,Ra), 



Ra 



203 




hCm) 


JS22J 




Jh(m') 


it** | 





206 

lm') 



-204 



207 



HESS | 



[® 1 O] 



10c 



102c 



101 



F(m,Ra) 



E(F(mJta) 



104 



h(m) 



106c 



30 



him) 
Ft* 



20c 



201c 



202 



ECFCmJfta), 



2D3C 



htm> 



206 



<m') 



-~204 



Ih(m') 



ittta 



205 



207 



m «t« I 



n i] 



(20) ^§§200 2-2 5 26 1 1 (P2 002-252 6 11 A) 






S223 


—-—JO 








S224 


> 










t 



II 2] 



IQd 



ioi 



1D5d 



104 



him) 



E(F(m.fe> 



"tr- 
iced 



30 



area | - {<^» gg» 



ECRa.K0.rt} 



201 d 



2£>2d 



h 



E(FUtVflA) 



h<mj 



203d 



Jim | 



206 



<nT) 





204 


jhCm') 


207 




Til 










205 





(21) ^200 2-2 5 2 6 1 1 (P2O02 — 2526 1 1 A) 



II 3] 




5244 



S245 



< 83m 


flWhfr&flHMtm'*!** | 


> 


r 



*R»nwm**nxioo6»* arms *EJ*nxit**nKioo6«6 &t« 

F*-A(#%) 5J104 AA28 FA07 JA04 NA11 



THIS PAGE BLANK (uspto) 



